Henex Privacy Policy

Who is responsible for your data

Henex Media is the data controller for Henex account and service operations. Place of business: Legal address must be configured before customer launch.

Privacy contact: privacy@henexai.com. The designated privacy contact performs this function unless a formally designated DPO is published.

What we collect

We collect account and business profile information, authentication and security records, workspace membership, products, prompts, uploaded or generated media, campaign plans, ad-platform identifiers and performance data, approvals, support and privacy requests, billing status, and technical audit, rate-limit, queue, and reliability records.

We do not need your date of birth. We record only your confirmation that you are an adult business user.

Purposes and lawful bases

• Contract: create and secure your account, operate workspaces, generate requested content, connect advertising platforms, store your work, provide billing, exports, support, and approved campaign operations.
• Legitimate interests: prevent fraud and abuse, maintain security and service reliability, investigate failures, enforce workspace access, and improve product safety using proportionate and documented controls.
• Consent: optional cookies or similar tools, and any processing for which the interface specifically asks for consent. You may withdraw consent without affecting earlier lawful processing.
• Legal obligation: comply with tax, accounting, regulatory, incident, and lawful-request duties.

Henex does not sell personal data or reuse one workspace's identifiable content to train a cross-customer model.

AI and automated assistance

Prompts, product information, media, campaign context, and requested outputs may be processed by OpenAI, Moonshot AI (Kimi), or Alibaba Cloud Model Studio (Qwen), depending on the supported task and configured routing. AI helps generate and review content; Henex requires human confirmation for actions that publish ads, spend money, increase budgets, or pause campaigns.

You may request human review of a material AI-assisted decision. See Subprocessors and international transfers.

Advertising platforms and recipients

If you connect Meta or TikTok, their APIs provide the assets, identifiers, permissions, campaigns, and reporting data you authorize. We disclose data to infrastructure, storage, email, payment, AI, and connected-platform providers only for documented service purposes. We may disclose limited data when legally required or necessary to protect people and the service.

International transfers

Some providers process data outside Nigeria. Henex assesses the destination, processor terms, data minimisation, security, and an applicable transfer basis before production use. Details and locations are maintained in the subprocessor register.

Retention and security

We keep data only for the documented service, legal, security, and recovery periods described in the Data Retention Policy. Controls include encrypted transport, access controls, authentication safeguards, rate limits, tenant checks, audit evidence, secrets kept server-side, and incident procedures. No system is risk-free.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, consent withdrawal, or human review. Signed-in users can download data and open a tracked request in Settings. Anyone may use Privacy Requests or email privacy@henexai.com. We verify identity before disclosure or erasure.

You may complain to the Nigeria Data Protection Commission if you believe your request or our processing has not been handled lawfully. We would appreciate the opportunity to resolve the matter first, but this does not limit your right to complain.

Account deletion

Verified deletion requests are tracked and processed under the Data Deletion Instructions. Shared workspaces are preserved and transferred to another eligible workspace administrator; solely owned workspaces and associated media are erased, subject to narrow legal holds and backup expiry.

Cookies

Non-essential cookies or similar tools remain off until you choose to accept them. You can reopen the preference control from the site footer. See the Cookie Policy.

Age limit and changes

Henex is for adults aged 18 or older using it for business. It is not directed to children. If we materially change this policy, we will update the version and require renewed acknowledgement where appropriate.